@authup/server-core 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/http/controllers/identity-provider/handlers/delete.js

@@ -6,17 +6,18 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteIdentityProviderRouteHandler = void 0;
+exports.deleteIdentityProviderRouteHandler = deleteIdentityProviderRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
+const request_1 = require("../../../request");
+const utils_1 = require("../../../utils");
 async function deleteIdentityProviderRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    const ability = (0, env_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PROVIDER_DROP)) {
+    const id = (0, request_1.useRequestIDParam)(req);
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.IDENTITY_PROVIDER_DELETE)) {
         throw new http_1.ForbiddenError();
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
@@ -25,7 +26,10 @@ async function deleteIdentityProviderRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (!(0, core_kit_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
+    if (!ability.can(core_kit_1.PermissionName.IDENTITY_PROVIDER_DELETE, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
+    if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
         throw new http_1.ForbiddenError();
     }
     const { id: entityId } = entity;
@@ -33,5 +37,4 @@ async function deleteIdentityProviderRouteHandler(req, res) {
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteIdentityProviderRouteHandler = deleteIdentityProviderRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/identity-provider/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAA6D;AAC7D,4CAAmD;AAE5C,KAAK,UAAU,kCAAkC,CACpD,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,gCAAsB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,gFA8BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAWH,gFAkCC;AA3CD,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAA6D;AAC7D,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,kCAAkC,CACpD,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,gCAAsB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,wBAAwB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/identity-provider/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAWhD,wBAAsB,mCAAmC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA4CnG;AAED,wBAAsB,kCAAkC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAiDlG"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAYhD,wBAAsB,mCAAmC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAwDnG;AAED,wBAAsB,kCAAkC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAmDlG"}

package/dist/http/controllers/identity-provider/handlers/read.js

@@ -6,7 +6,8 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneIdentityProviderRouteHandler = exports.getManyIdentityProviderRouteHandler = void 0;
+exports.getManyIdentityProviderRouteHandler = getManyIdentityProviderRouteHandler;
+exports.getOneIdentityProviderRouteHandler = getOneIdentityProviderRouteHandler;
 const kit_1 = require("@authup/kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
@@ -14,10 +15,11 @@ const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 const utils_1 = require("../../../utils");
 async function getManyIdentityProviderRouteHandler(req, res) {
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const repository = dataSource.getRepository(domains_1.IdentityProviderEntity);
+    const repository = new domains_1.IdentityProviderRepository(dataSource);
     const query = repository.createQueryBuilder('provider');
     const { pagination } = (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'provider',
@@ -48,6 +50,10 @@ async function getManyIdentityProviderRouteHandler(req, res) {
         },
     });
     const [entities, total] = await query.getManyAndCount();
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (ability.can(core_kit_1.PermissionName.IDENTITY_PROVIDER_READ)) {
+        await repository.findAndAppendExtraAttributesToMany(entities.filter((entity) => ability.can(core_kit_1.PermissionName.IDENTITY_PROVIDER_READ, { attributes: entity })));
+    }
     return (0, routup_1.send)(res, {
         data: entities,
         meta: {
@@ -56,9 +62,10 @@ async function getManyIdentityProviderRouteHandler(req, res) {
         },
     });
 }
-exports.getManyIdentityProviderRouteHandler = getManyIdentityProviderRouteHandler;
 async function getOneIdentityProviderRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req, {
+        strict: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.IdentityProviderRepository(dataSource);
     const query = repository.createQueryBuilder('provider');
@@ -94,10 +101,9 @@ async function getOneIdentityProviderRouteHandler(req, res) {
         throw new http_1.NotFoundError();
     }
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (ability.has(core_kit_1.PermissionName.PROVIDER_EDIT)) {
+    if (ability.can(core_kit_1.PermissionName.IDENTITY_PROVIDER_READ, { attributes: entity })) {
         await repository.findAndAppendExtraAttributesTo(entity);
     }
     return (0, routup_1.send)(res, entity);
 }
-exports.getOneIdentityProviderRouteHandler = getOneIdentityProviderRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/identity-provider/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAG2B;AAC3B,qCAA2C;AAC3C,+CAAkD;AAClD,iDAAuG;AACvG,0CAA+C;AAExC,KAAK,UAAU,mCAAmC,CAAC,GAAY,EAAE,GAAa;IACjF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,gCAAsB,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,UAAU;QACxB,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,UAAU;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;SACrE;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC;SAC9C;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AA5CD,kFA4CC;AAEM,KAAK,UAAU,kCAAkC,CAAC,GAAY,EAAE,GAAa;IAChF,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAExD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,UAAU;QACxB,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,UAAU;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAjDD,gFAiDC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgBH,kFAwDC;AAED,gFAmDC;AA3HD,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAG2B;AAC3B,qCAA2C;AAC3C,+CAAkD;AAClD,iDAA+E;AAC/E,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,mCAAmC,CAAC,GAAY,EAAE,GAAa;IACjF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,UAAU;QACxB,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,UAAU;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;SACrE;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC;SAC9C;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,CAAC,kCAAkC,CAC/C,QAAQ,CAAC,MAAM,CACX,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CACnB,yBAAc,CAAC,sBAAsB,EACrC,EAAE,UAAU,EAAE,MAAM,EAAE,CACzB,CACJ,CACJ,CAAC;IACN,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,kCAAkC,CAAC,GAAY,EAAE,GAAa;IAChF,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAExD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,UAAU;QACxB,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,UAAU;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/identity-provider/handlers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,kCAAkC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8BnG"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/update.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,kCAAkC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAkCnG"}

package/dist/http/controllers/identity-provider/handlers/update.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateIdentityProviderRouteHandler = void 0;
+exports.updateIdentityProviderRouteHandler = updateIdentityProviderRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
@@ -16,9 +16,9 @@ const utils_1 = require("../../../utils");
 const utils_2 = require("../utils");
 const request_1 = require("../../../request");
 async function updateIdentityProviderRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PROVIDER_EDIT)) {
+    if (!ability.has(core_kit_1.PermissionName.IDENTITY_PROVIDER_UPDATE)) {
         throw new http_1.ForbiddenError();
     }
     const validator = new utils_2.IdentityProviderRequestValidator();
@@ -31,6 +31,9 @@ async function updateIdentityProviderRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
+    if (!ability.can(core_kit_1.PermissionName.IDENTITY_PROVIDER_UPDATE, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
     if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
         throw new http_1.ForbiddenError();
     }
@@ -38,5 +41,4 @@ async function updateIdentityProviderRouteHandler(req, res) {
     await repository.saveWithAttributes(entity, attributes);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updateIdentityProviderRouteHandler = updateIdentityProviderRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/identity-provider/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAiE;AACjE,0CAA+C;AAC/C,oCAA4D;AAC5D,8CAA2D;AAEpD,KAAK,UAAU,kCAAkC,CAAC,GAAY,EAAE,GAAa;IAChF,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,wCAAgC,EAAE,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE;QAClE,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;IAE9D,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,gFA8BC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/identity-provider/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,gFAkCC;AA5CD,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAAiE;AACjE,0CAA+C;AAC/C,oCAA4D;AAC5D,8CAA8E;AAEvE,KAAK,UAAU,kCAAkC,CAAC,GAAY,EAAE,GAAa;IAChF,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,wCAAgC,EAAE,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE;QAClE,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;IAE9D,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,wBAAwB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/identity-provider/module.js

@@ -18,7 +18,8 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerIdentityProviderController = exports.IdentityProviderController = void 0;
+exports.IdentityProviderController = void 0;
+exports.registerIdentityProviderController = registerIdentityProviderController;
 const decorators_1 = require("@routup/decorators");
 const routup_1 = require("routup");
 const core_kit_1 = require("@authup/core-kit");
@@ -109,5 +110,4 @@ function registerIdentityProviderController(router) {
         }
     }));
 }
-exports.registerIdentityProviderController = registerIdentityProviderController;
 //# sourceMappingURL=module.js.map

package/dist/http/controllers/identity-provider/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/http/controllers/identity-provider/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;AAEH,mDAE4B;AAC5B,mCAAqC;AAKrC,+CAG0B;AAC1B,yCAQoB;AACpB,iDAA2D;AAIpD,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAE7B,AAAN,KAAK,CAAC,YAAY,CACF,GAAQ,EACH,GAAQ;QAEzB,OAAO,IAAA,8CAAmC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACA,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACD,EAAU,EACV,IAAmC,EAChC,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACD,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACJ,IAAmC,EAC5B,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;CACJ,CAAA;AA7CY,gEAA0B;AAE7B;IADL,IAAA,iBAAI,EAAC,EAAE,EAAE,EAAE,CAAC;IAER,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACN,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAA,iBAAI,EAAC,MAAM,EAAE,EAAE,CAAC;IAEZ,WAAA,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAA;IACP,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;6DAGnB;AAGK;IADL,IAAA,kBAAK,EAAC,MAAM,EAAE,CAAC,oCAAuB,CAAC,CAAC;IAEpC,WAAA,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAA;IACP,WAAA,IAAA,kBAAK,GAAE,CAAA;IACP,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAA,oBAAO,EAAC,MAAM,EAAE,CAAC,oCAAuB,CAAC,CAAC;IAEtC,WAAA,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAA;IACP,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAA,kBAAK,EAAC,EAAE,EAAE,CAAC,oCAAuB,CAAC,CAAC;IAEhC,WAAA,IAAA,kBAAK,GAAE,CAAA;IACH,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;6DAGnB;qCA5CQ,0BAA0B;IAFtC,IAAA,kBAAK,EAAC,UAAU,CAAC;IACjB,IAAA,wBAAW,EAAC,qBAAqB,CAAC;GACtB,0BAA0B,CA6CtC;AAED,SAAgB,kCAAkC,CAAC,MAAc;IAC7D,MAAM,CAAC,GAAG,CACN,IAAA,6CAAkC,EAAC,KAAK,CAAC,EACzC,IAAA,oBAAW,EAAC,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClC,IAAI,CAAC;YACD,MAAM,IAAA,mDAAwC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,GAAG,CACN,IAAA,qDAA0C,EAAC,KAAK,CAAC,EACjD,IAAA,oBAAW,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC;YACD,MAAM,IAAA,wDAA6C,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC,CAAC,CACL,CAAC;AACN,CAAC;AAtBD,gFAsBC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/http/controllers/identity-provider/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;AA0EH,gFAsBC;AA9FD,mDAE4B;AAC5B,mCAAqC;AAKrC,+CAG0B;AAC1B,yCAQoB;AACpB,iDAA2D;AAIpD,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAE7B,AAAN,KAAK,CAAC,YAAY,CACF,GAAQ,EACH,GAAQ;QAEzB,OAAO,IAAA,8CAAmC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACA,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACD,EAAU,EACV,IAAmC,EAChC,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACD,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACJ,IAAmC,EAC5B,GAAQ,EACP,GAAQ;QAEzB,OAAO,IAAA,6CAAkC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;CACJ,CAAA;AA7CY,gEAA0B;AAE7B;IADL,IAAA,iBAAI,EAAC,EAAE,EAAE,EAAE,CAAC;IAER,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACN,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAA,iBAAI,EAAC,MAAM,EAAE,EAAE,CAAC;IAEZ,WAAA,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAA;IACP,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;6DAGnB;AAGK;IADL,IAAA,kBAAK,EAAC,MAAM,EAAE,CAAC,oCAAuB,CAAC,CAAC;IAEpC,WAAA,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAA;IACP,WAAA,IAAA,kBAAK,GAAE,CAAA;IACP,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAA,oBAAO,EAAC,MAAM,EAAE,CAAC,oCAAuB,CAAC,CAAC;IAEtC,WAAA,IAAA,kBAAK,EAAC,IAAI,CAAC,CAAA;IACP,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAA,kBAAK,EAAC,EAAE,EAAE,CAAC,oCAAuB,CAAC,CAAC;IAEhC,WAAA,IAAA,kBAAK,GAAE,CAAA;IACH,WAAA,IAAA,qBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,sBAAS,GAAE,CAAA;;;;6DAGnB;qCA5CQ,0BAA0B;IAFtC,IAAA,kBAAK,EAAC,UAAU,CAAC;IACjB,IAAA,wBAAW,EAAC,qBAAqB,CAAC;GACtB,0BAA0B,CA6CtC;AAED,SAAgB,kCAAkC,CAAC,MAAc;IAC7D,MAAM,CAAC,GAAG,CACN,IAAA,6CAAkC,EAAC,KAAK,CAAC,EACzC,IAAA,oBAAW,EAAC,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClC,IAAI,CAAC;YACD,MAAM,IAAA,mDAAwC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,GAAG,CACN,IAAA,qDAA0C,EAAC,KAAK,CAAC,EACjD,IAAA,oBAAW,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC;YACD,MAAM,IAAA,wDAA6C,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC,CAAC,CACL,CAAC;AACN,CAAC"}

package/dist/http/controllers/permission/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA+C/F"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,+BAA+B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAmD/F"}

package/dist/http/controllers/permission/handlers/create.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createOnePermissionRouteHandler = void 0;
+exports.createOnePermissionRouteHandler = createOnePermissionRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
@@ -19,7 +19,7 @@ const utils_2 = require("../../../utils");
 const utils_3 = require("../utils");
 async function createOnePermissionRouteHandler(req, res) {
     const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_ADD)) {
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_CREATE)) {
         throw new http_1.ForbiddenError();
     }
     const validator = new utils_3.PermissionRequestValidator();
@@ -30,6 +30,9 @@ async function createOnePermissionRouteHandler(req, res) {
         const { id } = (0, utils_2.useRequestEnv)(req, 'realm');
         data.realm_id = id;
     }
+    if (!ability.can(core_kit_1.PermissionName.PERMISSION_CREATE, { attributes: data })) {
+        throw new http_1.ForbiddenError();
+    }
     if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_2.useRequestEnv)(req, 'realm'), data.realm_id)) {
         throw new http_1.BadRequestError((0, utils_1.buildErrorMessageForAttribute)('realm_id'));
     }
@@ -55,5 +58,4 @@ async function createOnePermissionRouteHandler(req, res) {
     });
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createOnePermissionRouteHandler = createOnePermissionRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/permission/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA6D;AAC7D,+CAG0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAA6F;AAC7F,6CAAkE;AAClE,8CAAiF;AACjF,0CAA+C;AAC/C,oCAAsD;AAE/C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,kCAA0B,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,8BAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,0BAAgB,EAAE,IAAI,CAAC,CAAC;IAEjE,IAAI,MAAqC,CAAC;IAE1C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;QACjE,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9B,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,0BAAe;YACrB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,MAAM,wBAAwB,GAAG,aAAa,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;QACnF,MAAM,wBAAwB,CAAC,MAAM,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;YAC5B,aAAa,EAAE,MAAM,CAAC,EAAE;YACxB,mBAAmB,EAAE,MAAM,CAAC,QAAQ;SACvC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AA/CD,0EA+CC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiBH,0EAmDC;AAlED,qCAA6D;AAC7D,+CAG0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAA6F;AAC7F,6CAAkE;AAClE,8CAAiF;AACjF,0CAA+C;AAC/C,oCAAsD;AAE/C,KAAK,UAAU,+BAA+B,CAAC,GAAY,EAAE,GAAa;IAC7E,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,kCAA0B,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,8BAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,0BAAgB,EAAE,IAAI,CAAC,CAAC;IAEjE,IAAI,MAAqC,CAAC;IAE1C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;QACjE,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9B,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,0BAAe;YACrB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,MAAM,wBAAwB,GAAG,aAAa,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;QACnF,MAAM,wBAAwB,CAAC,MAAM,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;YAC5B,aAAa,EAAE,MAAM,CAAC,EAAE;YACxB,mBAAmB,EAAE,MAAM,CAAC,QAAQ;SACvC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/permission/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA4B7F"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgC7F"}

package/dist/http/controllers/permission/handlers/delete.js

@@ -6,17 +6,18 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deletePermissionRouteHandler = void 0;
+exports.deletePermissionRouteHandler = deletePermissionRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 const utils_1 = require("../../../utils");
 async function deletePermissionRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_DROP)) {
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
         throw new http_1.ForbiddenError('You are not allowed to drop a permission.');
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
@@ -28,10 +29,12 @@ async function deletePermissionRouteHandler(req, res) {
     if (entity.built_in) {
         throw new http_1.BadRequestError('A built-in permission can not be deleted.');
     }
+    if (!ability.can(core_kit_1.PermissionName.PERMISSION_DELETE, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
     const { id: entityId } = entity;
     await repository.remove(entity);
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deletePermissionRouteHandler = deletePermissionRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/permission/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAE5E,+CAAkD;AAElD,mCAAuD;AACvD,yDAAkD;AAClD,iDAAuD;AACvD,0CAA+C;AAExC,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,qBAAc,CAAC,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA5BD,oEA4BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,oEAgCC;AA1CD,qCAA4E;AAE5E,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAAuD;AACvD,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,CAAC,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/permission/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA2B7F;AAED,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAyB5F"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAoC7F;AAED,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAoC5F"}

package/dist/http/controllers/permission/handlers/read.js

@@ -6,14 +6,24 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOnePermissionRouteHandler = exports.getManyPermissionRouteHandler = void 0;
+exports.getManyPermissionRouteHandler = getManyPermissionRouteHandler;
+exports.getOnePermissionRouteHandler = getOnePermissionRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
 const kit_1 = require("@authup/kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
+const utils_1 = require("../../../utils");
 async function getManyPermissionRouteHandler(req, res) {
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
+        throw new http_1.ForbiddenError();
+    }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.PermissionEntity);
     const query = repository.createQueryBuilder('permission');
@@ -38,9 +48,16 @@ async function getManyPermissionRouteHandler(req, res) {
         },
     });
 }
-exports.getManyPermissionRouteHandler = getManyPermissionRouteHandler;
 async function getOnePermissionRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
+        throw new http_1.ForbiddenError();
+    }
+    const id = (0, request_1.useRequestIDParam)(req, {
+        strict: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.PermissionEntity);
     const query = repository.createQueryBuilder('permission');
@@ -60,5 +77,4 @@ async function getOnePermissionRouteHandler(req, res) {
     }
     return (0, routup_1.send)(res, result);
 }
-exports.getOnePermissionRouteHandler = getOnePermissionRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/permission/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAAqE;AAE9D,KAAK,UAAU,6BAA6B,CAAC,GAAY,EAAE,GAAa;IAC3E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SACtD;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AA3BD,sEA2BC;AAEM,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,QAAQ,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAzBD,oEAyBC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAeH,sEAoCC;AAED,oEAoCC;AAvFD,+CAAkD;AAClD,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA2D;AAC3D,iDAAqE;AACrE,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,6BAA6B,CAAC,GAAY,EAAE,GAAa;IAC3E,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAChD,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SACtD;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAChD,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAE1D,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,QAAQ,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/permission/handlers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/update.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA4C7F"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/update.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgD7F"}

package/dist/http/controllers/permission/handlers/update.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updatePermissionRouteHandler = void 0;
+exports.updatePermissionRouteHandler = updatePermissionRouteHandler;
 const http_1 = require("@ebec/http");
 const kit_1 = require("@authup/kit");
 const core_kit_1 = require("@authup/core-kit");
@@ -19,9 +19,9 @@ const utils_2 = require("../../../utils");
 const utils_3 = require("../utils");
 const request_1 = require("../../../request");
 async function updatePermissionRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_EDIT)) {
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE)) {
         throw new http_1.ForbiddenError('You are not permitted to edit a permission.');
     }
     const validator = new utils_3.PermissionRequestValidator();
@@ -48,8 +48,10 @@ async function updatePermissionRouteHandler(req, res) {
         id: entity.id,
     });
     entity = repository.merge(entity, data);
+    if (!ability.can(core_kit_1.PermissionName.PERMISSION_UPDATE, { attributes: data })) {
+        throw new http_1.ForbiddenError();
+    }
     await repository.save(entity);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updatePermissionRouteHandler = updatePermissionRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/permission/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,qCAA4C;AAC5C,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAuD;AACvD,6CAAkE;AAClE,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA2D;AAEpD,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,qBAAc,CAAC,6CAA6C,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,kCAA0B,EAAE,CAAC;IAEnD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IACH,IAAI,IAAA,mBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAE9D,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,QAAQ;QACf,IAAA,mBAAa,EAAC,IAAI,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,uDAAuD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,0BAAgB,EAAE,IAAI,EAAE;QAC7D,EAAE,EAAE,MAAM,CAAC,EAAE;KAChB,CAAC,CAAC;IAEH,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA5CD,oEA4CC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/permission/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAeH,oEAgDC;AA7DD,qCAA4E;AAC5E,qCAA4C;AAC5C,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAuD;AACvD,6CAAkE;AAClE,0CAA+C;AAC/C,oCAAsD;AACtD,8CAA8E;AAEvE,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,CAAC,6CAA6C,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,kCAA0B,EAAE,CAAC;IAEnD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IACH,IAAI,IAAA,mBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IAE9D,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,QAAQ;QACf,IAAA,mBAAa,EAAC,IAAI,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,uDAAuD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,0BAAgB,EAAE,IAAI,EAAE;QAC7D,EAAE,EAAE,MAAM,CAAC,EAAE;KAChB,CAAC,CAAC;IAEH,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/policy/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/create.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA0CzF"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/create.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8CzF"}

package/dist/http/controllers/policy/handlers/create.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createPolicyRouteHandler = void 0;
+exports.createPolicyRouteHandler = createPolicyRouteHandler;
 const kit_1 = require("@authup/kit");
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
@@ -20,7 +20,7 @@ const utils_3 = require("../utils");
 const request_1 = require("../../../request");
 async function createPolicyRouteHandler(req, res) {
     const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_ADD)) {
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_CREATE)) {
         throw new http_1.ForbiddenError();
     }
     const validator = new utils_3.PolicyRequestValidator();
@@ -47,8 +47,10 @@ async function createPolicyRouteHandler(req, res) {
         }
         data.parent = parent;
     }
+    if (!ability.can(core_kit_1.PermissionName.PERMISSION_CREATE, { attributes: { ...entity, ...attributes } })) {
+        throw new http_1.ForbiddenError();
+    }
     await repository.saveWithAttributes(entity, attributes);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createPolicyRouteHandler = createPolicyRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/policy/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAgD;AAChD,qCAA6D;AAC7D,+CAG0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAqE;AACrE,6CAAkE;AAClE,0CAA+C;AAC/C,oCAAkD;AAClD,8CAAiF;AAE1E,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,8BAAsB,EAAE,CAAC;IAE/C,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE;QAClE,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,8BAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,sBAAY,EAAE,IAAI,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAClE,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAiB,CAAC,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,sBAAe,CAAC,8CAA8C,CAAC,CAAC;YAC9E,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExD,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AA1CD,4DA0CC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkBH,4DA8CC;AA9DD,qCAAgD;AAChD,qCAA6D;AAC7D,+CAG0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAqE;AACrE,6CAAkE;AAClE,0CAA+C;AAC/C,oCAAkD;AAClD,8CAAiF;AAE1E,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,8BAAsB,EAAE,CAAC;IAE/C,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE;QAClE,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAA,8BAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,sBAAY,EAAE,IAAI,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAClE,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAiB,CAAC,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,sBAAe,CAAC,8CAA8C,CAAC,CAAC;YAC9E,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExD,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/policy/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CA2Bf"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CA+Bf"}

package/dist/http/controllers/policy/handlers/delete.js

@@ -6,17 +6,18 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deletePolicyRouteHandler = void 0;
+exports.deletePolicyRouteHandler = deletePolicyRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 const utils_1 = require("../../../utils");
 async function deletePolicyRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_DROP)) {
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
         throw new http_1.ForbiddenError();
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
@@ -25,6 +26,9 @@ async function deletePolicyRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
+    if (!ability.can(core_kit_1.PermissionName.PERMISSION_DELETE, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
     if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
         throw new http_1.ForbiddenError();
     }
@@ -33,5 +37,4 @@ async function deletePolicyRouteHandler(req, res) {
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deletePolicyRouteHandler = deletePolicyRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/policy/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAmD;AACnD,0CAA+C;AAExC,KAAK,UAAU,wBAAwB,CAC1C,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,4DA8BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAWH,4DAkCC;AA3CD,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAAmD;AACnD,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,wBAAwB,CAC1C,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/policy/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA6CzF;AAED,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA6CxF"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/read.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAWhD,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAsDzF;AAED,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAwDxF"}

package/dist/http/controllers/policy/handlers/read.js

@@ -6,14 +6,24 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOnePolicyRouteHandler = exports.getManyPolicyRouteHandler = void 0;
+exports.getManyPolicyRouteHandler = getManyPolicyRouteHandler;
+exports.getOnePolicyRouteHandler = getOnePolicyRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
 const kit_1 = require("@authup/kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
+const utils_1 = require("../../../utils");
 async function getManyPolicyRouteHandler(req, res) {
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
+        throw new http_1.ForbiddenError();
+    }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.PolicyRepository(dataSource);
     const query = repository.createQueryBuilder('policy');
@@ -54,9 +64,16 @@ async function getManyPolicyRouteHandler(req, res) {
         },
     });
 }
-exports.getManyPolicyRouteHandler = getManyPolicyRouteHandler;
 async function getOnePolicyRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
+        throw new http_1.ForbiddenError();
+    }
+    const id = (0, request_1.useRequestIDParam)(req, {
+        strict: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.PolicyRepository(dataSource);
     const query = repository.createQueryBuilder('policy');
@@ -93,5 +110,4 @@ async function getOnePolicyRouteHandler(req, res) {
     await repository.findAndAppendExtraAttributesTo(entity);
     return (0, routup_1.send)(res, entity);
 }
-exports.getOnePolicyRouteHandler = getOnePolicyRouteHandler;
 //# sourceMappingURL=read.js.map